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□ This report is based on translations from the original language into the following language 
winch is the language of a translation furnished for the purposes of: 

I I international search (under Rules 1 2.3 and 23. 1 (b)) 

I I publication of the international application (under Rule 12.4) 

I I international preliminary examination (under Rules 55.2 and/or 55.3) 

22K t^^nm * e intemational Ration, this report is based on (replacement sheets which have been 
nZ» V receiving Office m response to an invitation under Article 14 are referred to in this report as "originally 
filed" and are not annexed to this report): r un&nuuy 

I | toe international application as originally filed/furnished 
[x] the description: 

pages 1-14 as originally filed/furnished 
pages* received by this Authority on with the letter of 
pages* received by this Authority on with the letter of 



fx] the claims: 



pages as originally filed/furnished 

pages* as amended (together with any statement) under Article 1 9 

pages* 15-22 received by this Authority on 8 April 2005 with the letter of 8 April 2005 
" " ^ * received by this Authority on with the letter of 



[x] the drawings: 

pages 1-3 as originally filed/furnished 
pages* received by this Authority on with the letter of 
pages* received by this Authority on with the letter of 
□ a sequence listing and/or any related table(s) - see Supplemental Box Relating to Sequence Listing. 
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| | the description, pages 

the claims, Nos. 
| ] the drawings, sheets/figs 
| | the sequence listing (specify): 
I I any table(s) related to the sequence listing (specify): 

P ^H^r *T b l 6n es ' ablished a f * ( some of ) *» amendments annexed to this report and listed below had not been 
made, since they have been considered to go beyond the disclosure as filed, as indicated in the Supplemental Box (Rule 

the description, pages 
| | the claims, Nos. 
[~1 the drawings, sheets/figs 
HZ! ^ e sec l uence listing (specify): 
I | anytable(s) related to the sequence listing (specify): 
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1. Statement 

Novelty (N) 



Inventive step (IS) 
Industrial applicability (IA) 



Claims 1-41 
Claims 

Claims 1-37,40,41 

Claims 38,39 

Claims 1-41 
Claims 



YES 

NO 

YES 

NO 

YES 

NO 



2. Citations and explanations (Rule 70.7) 

NOVELTY A INVENTTVP. STEP Claims 1 -41 . 

^°i? C 2?T diS °! OSe ' al ? De ° r ^ 811 obvious c °mbination, a credential communication device that performs mutual 
credential verification and mutual trusted recognition with another such credential communication device wheninTlosf^ 

nSsr^ 

SK?^ * d if eC<ed to J a . portable bu PP er resistant lasted device that is adapted to be used for personal identification 
™d 22? . CXC ^ ge ^r 01 *™* 5 a wireless network toterface, an inductive connector and Ltedlnput She? 
and light displays. The term "trusted" implies employing sufficient hardware and software integrity ^easuSs to aUo w for 

MaS Tf' ° f TTZ? ClaSSmed **»"*■»• closest prior art of US^Sl A fcALLTc?^ 
May 2000, discloses a handheld device having an integral sensor, control, storage, display means wimTwSlesT 

to Z^'fr mt6rfaCe ^ t0 perform Processing, storage, di^lay and tiZISon rfdate The abilitv 

to ensure trusted" communication, with hardware and software integrity to protect from subversion XmSesIhe 
present mvenhon and provides it with necessary inventiveness. aversion, oismiguisnes the 

sS aSSewhe^n 1 ^ "f deV f CC t0 Peif0nn mUtUal Credential verific ^ ^ mutual trusted recognition with another 
al W™?S£T^^xt t0 T 1Ude Party * volveme * * ^e transmission^d reception of 
«mi « h ^ 6058304 A (CALLAGHAN et al) 2 May 2000, a handheld device having an integral sensor control 
Sv^^ meaDS ^1 ^ teIecommunications ^rface is known to perform capturing, £oc5ng 'Si? 
2 S? Sm,SS1 ° n ° f ^ ^ abiHt y to incorporate some kind of credential exchange capabihty ZfS 
cards or RFID tags, into such a device, would be well within the skill set of the addressee, as of the priority^ate Stive 

^Z^I^V'IT bUtt0nS ' ^ ^ meChaDical ° fthe device - Tney do not serve to"SrteSe^e 
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Box No, Vm Certain observations on the international application 



The foUowing observations on the clarity of the claims, description, and drawings or on the question whether the claims are fully 
supported by the description, are made: 

1 . The invention defined in claims 38, 39 is not supported by the description. The inventive concept is directed to a credential 
communication device that performs mutual credential verification and mutual trusted recognition with another such device 
™ hen m close physical proximity as to exclude thi rd party involvement in the transmission and reception of data. These 
features are conspicuously absent from claims 38 and 39. 
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CLAIMS 
1. 



A credential communication device adapted to transmit and 
receive data, including means to process said data in order to effect 
mutual credential verification and trusted mutual recognition between 
the device and a second credential communication device, without 
reference to a third party, further including at least one proximity 
conductor adapted to be controlled to transmit and receive at least 
some data only when in such physical proximity to a second credential 
communication device as to effectively exclude the possibility of third 
party involvement in the transmission and reception of said data. 

2. A credential communication device as in claim 1 , further adapted 
to require a user of the device to authenticate their identity to the 
credential communication device immediately before communication 
with the second credential communication device. 



15 3 



A credential communication device as in claim 1or claim 2 further 
adapted to accept identity authentication by the keying of a pass code 
into the device. 

4. A credential communication device as in claim 1 or claim 2 further 
adapted to accept identity authentication by use of a biometric 

20 authentication apparatus. 

5. A credential communication device as in any one of the 
preceding claims wherein the proximity connector is an induction 
connection. 

6. A credential communication device as in claim 5, wherein the 

25 induction connection is effected by a RF transceiver of such power as to 
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require the physical proximity to be such as approximates physical 
touch. 



10 



15 



20 



25 



7. A credential communication device as in any one of the 
preceding claims wherein there are means to effect variation in the 
power output of the proximity conductor in relation to the data to be 
transmitted wherein in use selected data, which is data whose 
unauthorised reception is acceptable, is transmitted at such power as to 
be received by the second credential communication device before said 
physical proximity to the second credential communication device as to 
effectively exclude the possibility of third party involvement in the 
transmission and reception of data is established, and other selected 
data, which is data whose unauthorised reception is not acceptable, is 
transmitted at such a power as to be received only when the credential 
exchange device is in such physical proximity to a second credential 
exchange device as to effectively exclude the possibility of third party 
involvement in the transmission and reception of data. 

8. A credential communication device as in any one of the 
preceding claims wherein the proximity conductor includes means to 
detect that physical touch is being maintained between the device and a 
second device, the device further adapted to transfer some data only 
when such touch is detected. 

9. A credential communication device as in claim 8 wherein the 
means to detect physical touch is a pressure sensor. 

1 0. A credential communication device as in any one of the 
preceding claims wherein the proximity connector is protected from 
physical or environmental damage by a thin layer or shell of material. 
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11. A credential communication device as in any one of the 
preceding claims including means to communicate the results of 
processing to effect credential verification. 

1 2. A credential communication device as in claim 1 1 wherein said 
communication means includes at least one trusted light indicator. 

1 3. A credential communication device as in claim 1 1 wherein said 
communication means includes at least three separately identifiable 
trusted light indicators. 

14. A credential communication device as in any one of claims 11-13 
wherein said light indicators are formed as bands around the device to 
facilitate visibility from multiple angles. 

1 5. A credential communication device as in any one of claims 11-14 
wherein said light indicators are light emitting diodes. 

1 6. A credential communication device as in any one of the 

15 preceding claims further including a trusted alpha-numeric display. 

1 7. A credential communication device as in any one of the 
preceding claims further including a biometric authentication apparatus. 

1 8. A credential communication device as in claim 1 7 wherein said 
biometric authentication apparatus is a fingerprint scanner. 

20 19. A credential communication device as in any one of the 
preceding claims further including means for receiving wireless 
transmissions from a distance further than the range of the proximity 
conductor. 
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20. A credential communication device as in any one of the 
preceding claims wherein the device is approximately cylindrical and 
the proximity conductor is located on the shaft of said approximately 
cylindrical structure, permitting momentary contact with a second device 

5 from a variety of angles. 

21 . A credential communication device as in any one of the 
preceding claims wherein the proximity conductor is a bulbous 
structure, permitting momentary contact with a second device from a 
variety of angles. 

10 22. A credential communication device as in any one of the 
preceding claims wherein the device is a component in a mutually 
authenticated ensemble of devices, the device being adapted to effect 
data display on a trusted remote visual display device. 

23. A credential communication device as in claim 22 wherein the 
15 remote visual display device is a badge display. 

24. A set of devices where a first of the devices is adapted to hold 
information in an electronic storage and effect transmission of such 
information upon a triggering of such transmission, and a second device 
is adapted to hold data in an electronic storage and adapted to receive 
transmissions from said first device and effect a comparison of such 
received data with that being held by said second device and when 
such received data is matching preselected criteria effect an output 
signal to this effect, the respective devices being adapted to effect a 
transmission and receiving of data between the devices only when in a 
selected range of distance apart or when touching, said devices being 
adapted to effect mutual credential verification, the devices being 
further adapted such that they will transmit and receive at least some 
data only when in such physical proximity as to effectively exclude the 
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possibility of third party involvement in the transmission and reception of 
data. 

25. A method for mutual suspicion credential exchange Including the 
steps of: 

5 positioning a credential exchange device as in any one of claims 1 -23 to 
touch or come into close proximity with a second such device, 
the credential exchange device transmitting data to and receiving data 
from the second device, 

the credential exchange device processing received data to determine 
10 the credential status of the second device, 

the credential exchange device outputting the results of the credential 
determination. 

26. A method for mutual suspicion credential exchange including the 
steps of: 

15 providing each participant with a credential exchange device as in any 
one of claims 1-23, 

loading the credential exchange device with credential data relevant to 
a user, 

each participant operating their device to seek appropriate credential 
20 data from a second device, 

each participant positioning their device to touch or come into close 
proximity with a second device, 

each device transmitting data to and receiving data from a second 
device, 

25 each device processing received data to determine the credential status 
of the second device, 

each device outputting the results of the credential determination. 

27. A method as in any one of claims 25-26 further including the 
steps of communicating an organisational mandatory security policy to 
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the credential exchange device, and the device applying said 
mandatory security policy to the data transmitted to the second device. 

28. The method of claim 27 wherein the communication of the 
organisational mandatory security policy is restricted to being a one-off 
process performed when the device is manufactured or first activated. 

29. The method of any one of claims 25-28 further including the 
steps of communicating a user discretionary security policy to the 
credential exchange device, and the device applying said user 
discretionary security policy to the data transmitted to the second 

10 device. 

30. The method of claim 29 wherein the communication of the user 
discretionary security policy is restricted to being a one-off process 
performed when the device is manufactured or first activated. 

31 . The method of claim 27 wherein the mandatory security policy is 
15 communicated to the credential communication device by means 

localised to the particular location in which the device is operating. 

32. The method of claim 31 wherein said policy communication is by 
secure wireless means. 

33. The method of any one of claims 25-32 including the step of the 
20 credential communication device signalling via secure wireless means 

to a remote visual display means in its own ensemble a visual depiction 
of the participant associated with the second device. 

34. A method for rapid verification of the credentials of a group of 
participants by a guard including the steps of: 

25 providing each participant and the guard with a credential 
communication device as in any one of claims 1-23, 

AMENDED SHEET 

IPEAJAU 



PCT/ATJ2004/000762 
Received 8 April 2005 



loading each participant's credential communication devices with data 

including the identity and credentials of the participant, 

operating the guard's device to cause it to seek appropriate identity or 

credential data from a participant's device, 

positioning each participant's device to touch or come into close 

proximity with the guard's device, 

transmitting data and receiving data between the guard's and the 
participant's devices, 

the guard's device processing received data to determine the credential 
status of the participant's device, 

the guard's device outputting the results of the credential determination. 

35. The method of claim 34 further including the step of providing a 
passive device adapted to extend the area in which proximity to the 
guard's device is sufficient for the proximity conductor to operate. 

36. The method of claim 35 wherein the passive device is a 
waveguide, adapted to allow the guard's credential communication to 
be inserted into it, further including the step of each participant passing 
their credential communication device through the waveguide to 
communicate their credentials. 



5 



10 



20 37. The method of any one of claims 34-36 wherein the guard's 

device is a component in an ensemble including a remote visual display 
device and further including the step of the guard's credential 
communication device signalling via secure wireless means to the 
remote visual display means in its own ensemble a visual depiction of 

25 the participant associated with the participant's device. 

38. A portable tamper resistant trusted device adapted to be used for 
personal identification, credential warrants, and credential exchange 
including an inductive connector, one or more trusted input switches, 
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one or more trusted light displays to permit viewing from multiple 
angles, a trusted display, an untrusted wheel press button, an untrusted 
audio generator, and a wireless network interface. 

39. A device as in claim 38 wherein the display is untrusted. 

40. A credential communication device substantially as described 
with respect to any one of the embodiments in the specification with 
reference to and as illustrated by the accompanying illustrations with 
respect to that embodiment. 

41 . A method for mutual suspicion credential exchange substantially 
as described with respect to any one of the embodiments in the 
specification with reference to and as illustrated by the accompanying 
illustrations with respect to that embodiment. 



